Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft
File:                     1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft (raw, json)
Hash identifier:          KO4KdK6LRoE3LFfnTJ50kGZecMXB5hopTOj6UCfKFXM=
Subject key identifier:   0E:76:7A:73:D1:5F:5C:63:2B:E6:45:6B:F5:46:F1:9B:2D:71:4E:8E
Authority key identifier: D5:4B:82:D7:19:14:40:02:05:1D:A0:F8:8C:76:8D:E4:40:AC:20:BD
Certificate issuer:       /CN=d54b82d719144002051da0f88c768de440ac20bd
Certificate serial:       019D9962B2C5C2EC591A6B05C9CAC8C65F8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1UuC1xkUQAIFHaD4jHaN5ECsIL0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft
Manifest number:          18BE
Signing time:             Fri 17 Apr 2026 03:01:15 +0000
Manifest this update:     Fri 17 Apr 2026 03:01:15 +0000
Manifest next update:     Sat 18 Apr 2026 03:01:15 +0000
Files and hashes:         1: 1UuC1xkUQAIFHaD4jHaN5ECsIL0.crl (hash: 9bzVxBcXoEIx+ujobOLjAg3nmm4G/hg2MNtQxUbLYCE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1UuC1xkUQAIFHaD4jHaN5ECsIL0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:b2:c5:c2:ec:59:1a:6b:05:c9:ca:c8:c6:5f:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d54b82d719144002051da0f88c768de440ac20bd
        Validity
            Not Before: Apr 17 03:01:15 2026 GMT
            Not After : Apr 18 03:01:15 2026 GMT
        Subject: CN=0e767a73d15f5c632be6456bf546f19b2d714e8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:6e:bb:4d:69:1f:d7:35:26:0c:bd:34:f7:0f:
                    cb:90:b3:13:fb:9c:e6:b6:20:cb:0c:b8:b8:fd:2b:
                    3b:a5:71:cd:46:72:32:39:c9:65:f2:54:a3:de:9e:
                    c0:d7:df:95:17:17:76:75:0c:4c:26:1c:de:eb:b4:
                    16:ba:10:cf:9c:bc:32:aa:fb:a6:f3:c7:53:66:1e:
                    72:df:3f:7f:17:c1:94:c9:89:eb:32:e0:64:47:a2:
                    a1:63:07:e2:7c:94:ae:5b:20:ca:2b:d5:5e:b7:86:
                    0b:03:ed:f4:12:40:4f:18:12:f8:3f:ec:55:80:ee:
                    7a:01:c2:ab:4b:cb:44:2c:c2:6a:fa:2e:d0:95:d2:
                    55:72:b7:a9:9b:09:d0:7c:34:38:d1:a7:b0:7e:66:
                    f5:bb:4e:88:c4:eb:27:79:ef:e9:cb:37:35:04:61:
                    2f:55:37:89:3f:52:15:fc:71:9a:38:09:f0:a2:1a:
                    ac:9d:3c:cf:00:35:d5:7a:70:cd:67:a4:fe:d3:c4:
                    22:b2:dc:78:25:47:c9:6e:54:66:7d:e3:fe:b1:b8:
                    90:2c:a2:e6:23:30:4f:ee:07:2d:8c:75:46:46:51:
                    65:17:ac:08:23:13:c7:0f:44:29:c7:a2:d5:a8:49:
                    ac:58:2a:e3:cc:37:d9:dd:05:59:28:0f:70:9b:49:
                    51:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:76:7A:73:D1:5F:5C:63:2B:E6:45:6B:F5:46:F1:9B:2D:71:4E:8E
            X509v3 Authority Key Identifier:
                keyid:D5:4B:82:D7:19:14:40:02:05:1D:A0:F8:8C:76:8D:E4:40:AC:20:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UuC1xkUQAIFHaD4jHaN5ECsIL0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:a3:50:0f:78:39:13:9d:85:30:e7:2f:d7:74:8f:ce:a5:a1:
         4c:34:7d:b4:7e:af:74:1a:c9:ab:d7:b9:20:2b:b1:bc:69:bf:
         39:92:53:26:d3:37:ab:0b:25:0c:47:c5:65:b2:2e:03:bb:7e:
         22:df:c2:e7:d6:2b:3c:7b:62:d8:68:1d:c0:bf:a2:d4:ad:0d:
         de:3f:77:e5:0a:c6:70:44:db:88:85:2c:1e:03:7f:33:2f:f6:
         ea:aa:8f:f4:08:66:b3:14:b5:b7:0a:4f:56:79:4b:7c:e9:89:
         d1:57:b7:6f:f6:05:23:b9:ac:16:86:2f:f6:4e:ac:b3:fe:4e:
         8d:71:bb:71:bb:0e:37:58:2d:9e:ea:5a:99:27:ce:c4:72:8c:
         6f:00:7e:33:43:e4:fb:7b:9f:a5:9a:bc:e5:89:22:23:da:31:
         20:a5:6d:e8:45:43:e1:1d:7f:fd:1f:7d:96:c0:7b:a0:3a:37:
         d1:1f:c0:54:33:4b:cc:43:fb:57:d4:01:83:32:1b:3f:8f:dd:
         61:2d:dd:a0:06:28:c6:8c:be:57:83:c4:4f:72:60:45:35:4c:
         d7:50:ee:a5:39:8d:5d:8c:da:17:f9:72:9a:a7:72:b4:90:e6:
         a5:2d:75:94:cc:8d:d3:03:25:b4:28:19:c8:f8:91:59:8e:38:
         e7:2e:3b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:20:59 2026 by rpki-client